From de28fd48338ff80dba1312d9e97c680f6abe6b13 Mon Sep 17 00:00:00 2001
From: iceman <acfmichelsen@gmail.com>
Date: Sat, 20 Apr 2024 10:24:13 -0400
Subject: [PATCH] fix exploit

---
 contracts/Periphery/ClaimCampaigns.sol | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/contracts/Periphery/ClaimCampaigns.sol b/contracts/Periphery/ClaimCampaigns.sol
index d53f92e..dcc0da4 100644
--- a/contracts/Periphery/ClaimCampaigns.sol
+++ b/contracts/Periphery/ClaimCampaigns.sol
@@ -189,7 +189,6 @@ contract ClaimCampaigns is ReentrancyGuard {
       emit TokensDonated(id, donationCollector, campaign.token, donation.amount, donation.tokenLocker);
     }
     claimLockups[id] = claimLockup;
-    SafeERC20.safeIncreaseAllowance(IERC20(campaign.token), claimLockup.tokenLocker, campaign.amount);
     campaigns[id] = campaign;
     emit ClaimLockupCreated(id, claimLockup);
     emit CampaignStarted(id, campaign);
@@ -227,6 +226,7 @@ contract ClaimCampaigns is ReentrancyGuard {
         rate = claimAmount / c.periods + 1;
       }
       uint256 start = c.start == 0 ? block.timestamp : c.start;
+      SafeERC20.safeIncreaseAllowance(IERC20(campaign.token), c.tokenLocker, claimAmount);
       if (campaign.tokenLockup == TokenLockup.Locked) {
         ILockupPlans(c.tokenLocker).createPlan(msg.sender, campaign.token, claimAmount, start, c.cliff, rate, c.period);
       } else {